Security protection method and system for electronic archive information and medium

Abstract

The invention relates to the technical field of data security, in particular to a security protection method and system for electronic archive information and a medium, and the method comprises the steps: dividing archive data, and analyzing the editing condition of data blocks in the archive data to obtain editing parameters of the data blocks, the method comprises the following steps: analyzing the distribution difference of editing clusters to which different data segments belong relative to data segments in all editing clusters in quantity and editing time by utilizing editing clusters obtained by clustering the data segments, and obtaining a differentiation coefficient of the data segments, and based on a data block to which any data segment belongs and the quantity of the data segments in the editing clusters; and carrying out key length evaluation on the data segments in combination with editing parameters and differentiation coefficients, so as to encrypt and store the archive data. According to the method, the encryption strategy of the AES algorithm is dynamically adjusted according to the data segment characteristics and the editing history, so that the performance of the encryption process is optimized while the data protection effect is improved.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a security protection method, system and medium for electronic archive information. Background Art

[0002] The information security of electronic archives mainly involves data integrity, confidentiality, availability and non-repudiation. In daily use, electronic archives often face a variety of potential security threats, including but not limited to malware attacks, data tampering, unauthorized access, data loss, system failures, etc. These threats may lead to the leakage, tampering or loss of electronic archive content, thus causing serious economic losses and reputation damage to organizations and individuals. Therefore, how to ensure that electronic archives are not subject to malicious attacks and data leakage during storage, transmission and use has become one of the core issues that need to be solved in the field of information security.

[0003] Among the existing methods for encrypting electronic archive information, the AES (Advanced Encryption Standard) algorithm is usually chosen. However, the conventional AES encryption algorithm uses a single and fixed key length to encrypt the plaintext of the electronic archive during use, resulting in an inability to effectively balance the encryption strength and computing resource consumption when encrypting a large amount of electronic archive information. This makes the AES algorithm subject to certain limitations in the application scenarios of electronic archive information encryption. Summary of the invention

[0004] The present invention provides a method, system and medium for protecting electronic archive information to solve the existing problems.

[0005] The present invention provides a method, system and medium for protecting electronic archive information. The following technical solutions are adopted: An embodiment of the present invention provides a method for protecting electronic archive information security, the method comprising the following steps: Obtaining the archive data to be encrypted and performing data cleaning, wherein the archive data includes the identity information, educational background information, and work background information of the personnel; Record the editing information of each edit of the archive data during storage and divide the archive data to obtain a number of data blocks, each of which contains a number of data segments. Analyze the editing situation of each data block in the archive data to obtain the editing parameters of the data block. Analyze the distribution differences in the number and editing time of the editing clusters to which different data segments belong relative to the data segments in all editing clusters using the editing clusters obtained after clustering the data segments, and obtain the differentiation coefficient of the data segments. Based on the data block to which the arbitrary data segment belongs and the number of data segments in the edit cluster, and in combination with the edit parameter and the differentiation coefficient, the key length of the arbitrary data segment is evaluated to obtain an actual key length of the arbitrary data segment; The archive data is encrypted and stored using AES using the actual key length corresponding to each data segment in the archive data.

[0006] Furthermore, the editing information of each editing of the archive data during storage is recorded and the archive data is divided to obtain a plurality of data blocks, each of which contains a plurality of data segments, including the specific method of: The identity information, educational background information, and work background information in the archival data are respectively used as corresponding data blocks; Each edit of the archive data in history is regarded as an edit moment, and several data that change at each edit moment are obtained and recorded as target data, so that the target data with continuous positions in the archive data constitute a data segment, and the data that has not changed and has continuous positions constitute the initial data segment.

[0007] Furthermore, the specific method of analyzing the editing status of each data block in the archive data and obtaining the editing parameters of the data block includes: The editing parameters of each data block are calculated based on the number of data segments in each data block in the current archive data, the amount of data corresponding to each data segment, and the editing time from the appearance of each data segment to the current time. The number of data segments in the data block and the amount of data corresponding to the data segments are both positively correlated with the editing parameters, and are negatively correlated with the editing time from the appearance of the data segments to the current time.

[0008] Furthermore, the specific method for obtaining the editing cluster is: According to the differences between the editing times of data segments, all data segments in the archive data are clustered using the DBSCAN clustering algorithm to obtain several clusters, which are recorded as editing clusters.

[0009] Furthermore, the specific calculation method of the differentiation coefficient of the data segment is: The specific calculation method of the differentiation coefficient of any data segment is: in, represents the differentiation coefficient of the data segment; Indicates the number of data segments in the edit cluster to which the data segment belongs; represents the standard deviation of the editing time of all data segments in the editing cluster described by the data segment; represents the average number of data segments in all edit clusters; represents the average standard deviation of the corresponding editing moments of the data segments in all editing clusters; represents the absolute value function; represents the linear normalization function.

[0010] Furthermore, the key length of the arbitrary data segment is evaluated based on the data block to which the arbitrary data segment belongs and the number of data segments in the edit cluster, and in combination with the edit parameter and the differentiation coefficient, to obtain the actual key length of the arbitrary data segment, including the specific method of: Obtaining the edit amount coefficient of the data segment through the number of data blocks to which any data segment belongs and the number of data segments in the edit cluster, and adjusting the edit parameters of the data blocks to which each data segment belongs and the differentiation coefficient of each data segment respectively, to obtain the key length parameter of each data segment; A mapping function is constructed using the key length parameter to map the key length parameter to the actual encryption key length to obtain the actual key length of each data segment.

[0011] Furthermore, the specific calculation method of the key length parameter of the data segment is: in, Indicates The key length parameter of each data segment; Indicates The editing parameters of the data block to which each data segment belongs; Indicated in The number of data segments in the data block to which the data segment belongs; Indicates The differentiation coefficient of each data segment; Indicated in Among all the data segments of the data block to which the data segment belongs, The number of data segments that belong to the same editing cluster; represents the linear normalization function.

[0012] Furthermore, the specific calculation method of the actual key length of the data segment is: in, For the The actual key length of each data segment; is the mapping parameter; is the minimum key length of the AES algorithm; The maximum key length of the AES algorithm; Indicates The key length parameter of each data segment; The function corresponding to the mapping parameter when obtaining the minimum value in the brackets; represents the minimum function; represents the absolute value function.

[0013] A security protection system for electronic archive information includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the security protection method for electronic archive information are implemented.

[0014] A computer-readable storage medium stores a computer program, which, when executed by a processor, is used to implement the steps of a method for protecting the security of electronic archive information.

[0015] The beneficial effects of the technical solution of the present invention are as follows: the embodiments of the present invention can effectively perform local analysis on the editing history of archival data by recording the editing information of archival data to track the process of data changes, thereby ensuring that only high-risk parts adopt stronger encryption strategies, thereby optimizing the overall encryption efficiency and avoiding unnecessary over-encryption. At the same time, by performing differentiated encryption processing on each data segment, potential security risks are reduced, and targeted security protection is performed according to the sensitivity, editing frequency and historical changes of archival data during storage and daily maintenance, thereby improving the flexibility and security of data encryption in electronic archival information management. In short, the embodiments of the present invention dynamically adjust the encryption strategy of the AES algorithm according to the characteristics of the data segment and the editing history, thereby improving the data protection effect while also optimizing the performance of the encryption process. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0017] Figure 1 The present invention is a flowchart of the steps of a method for protecting the security of electronic archive information. DETAILED DESCRIPTION

[0018] In order to further explain the technical means and effects adopted by the present invention to achieve the predetermined invention purpose, the following is a method, system and medium for protecting the security of electronic archive information proposed by the present invention in combination with the accompanying drawings and preferred embodiments. Its specific implementation, structure, features and effects are described in detail as follows. In the following description, different "one embodiment" or "another embodiment" does not necessarily refer to the same embodiment. In addition, specific features, structures or characteristics in one or more embodiments may be combined in any suitable form.

[0019] Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs.

[0020] The following is a detailed description of a method, system and medium for protecting electronic archive information provided by the present invention in conjunction with the accompanying drawings.

[0021] See also Figure 1 , which shows a flowchart of a method for protecting electronic archive information provided by an embodiment of the present invention, the method comprising the following steps: Step S001: Obtain the archive data to be encrypted and perform data cleaning.

[0022] It should be noted that when obtaining an individual's electronic archival information, the file carriers of the electronic archival information may be diverse. In order to better analyze and process the electronic archival information during encryption and prevent the archival data from being affected by file carriers in different formats, the embodiment of the present invention needs to pre-process the obtained electronic archival information and extract the archival data in the electronic archival information to achieve digital management of electronic archival information in different formats.

[0023] Specifically, in order to implement the security protection method for electronic archive information proposed in this embodiment, it is first necessary to collect the archive data to be encrypted. The specific process is as follows: First, implement a data format check to obtain the format corresponding to each file in the electronic archive information (such as PDF, text, Excel, image, etc.) and mark its processing method.

[0024] Then, for each format, specific extraction tools or libraries are used to extract archival data from the electronic archival information, and the information in the archival data is divided. The archival data contains various information of personnel, including: identity information (name, gender, age, place of origin, date of birth, ID number), educational background information, and work background information.

[0025] For example, the corresponding extraction methods for archival data in common file formats include: using PyPDF2 or pdfplumber to extract archival data from PDF files; using pandas.read_csv() to read archival data in Excel spreadsheet files; using OCR libraries (such as Tesseract) to recognize archival data in images.

[0026] Secondly, the extracted archive data can be saved through intermediate data structures (JSON, dictionary, etc.).

[0027] Finally, the archival data is cleaned to identify and remove empty values, duplicates, or unnecessary information in each individual's archival data, format dates, numbers, etc. in a unified manner, and use regular expressions to verify and clean up text that does not conform to the rules.

[0028] So far, the archival data is obtained through the above method.

[0029] Step S002: Record the editing information of each time the archive data is edited during storage and divide the archive data to obtain a number of data blocks, each of which contains a number of data segments. Analyze the editing status of each data block in the archive data to obtain the editing parameters of the data block; use the editing clusters obtained after clustering the data segments to analyze the distribution differences in quantity and editing time of the editing clusters to which different data segments belong relative to the data segments in all editing clusters to obtain the differentiation coefficient of the data segment.

[0030] It should be noted that in the process of using the AES algorithm to encrypt archive data, since archive data contains a variety of personal data, and the privacy of personal information carried by different data is different, when encrypting electronic archive information, it is necessary to encrypt different parts of the archive data with keys of different lengths according to the privacy of personal information, so as to balance the security and efficiency of archive data encryption. And because personal archive information needs to be updated and maintained for a long time, it needs to go through a decryption and encryption process every time the data is updated and maintained, that is, the archive data needs to be decrypted, then edited by the archive management personnel, and then re-encrypted and stored. Therefore, when encrypting archive data, the privacy and editing requirements of the archive data should be considered at the same time. For frequently accessed data, the key length can be shorter to reduce performance overhead, and for less accessed data, a longer key is used to improve security; in addition, for long-term storage or highly sensitive archives, it is necessary to re-encrypt the archives regularly and use a longer key length to deal with the security threats that may be caused by long-term storage.

[0031] Specifically, in step S201, the archive data is divided into blocks to obtain a number of data blocks, and a number of data segments in the data blocks are obtained according to the editing status of the archive data. The number of data segments in the data blocks in the archive data and the editing status of the data segments are analyzed to calculate the editing parameters of each data block.

[0032] First, for any individual's archival data, the archival data is divided into a number of data blocks according to the content of the archival data, and the data segments in the data blocks are obtained.

[0033] As an embodiment, the specific method of dividing the archive data into a plurality of data blocks and obtaining the data segments in the data blocks includes: 1) The identity information, educational background information, and work background information in the archival data are respectively used as corresponding data blocks.

[0034] 2) Take each edit of the archive data in history as an edit moment, obtain several data that change at each edit moment and record them as target data, so that the target data with continuous positions in the archive data constitute a data segment, and the data that has not changed and has continuous positions constitute the initial data segment.

[0035] The changes at least include: adding, replacing, moving, and deleting.

[0036] It should also be noted that in order to avoid excessive fragmentation of the archive data due to long-term updates and maintenance using the data segment division method, which would affect the subsequent analysis results of the archive data and reduce the encryption effect, in other embodiments of the present invention, when the number of editing moments passed by the data segment exceeds a preset threshold, the data segment can be used as the initial data segment. For example, if a data segment appears at the second editing moment and has not changed in the 10 editing moments that have passed, the data segment will be used as the initial data segment.

[0037] Then, the editing parameters of each data block are calculated based on the number of data segments in each data block in the current archive data, the amount of data corresponding to each data segment, and the editing time from the appearance of each data segment to the current time. The number of data segments in the data block and the amount of data corresponding to the data segments are positively correlated with the editing parameters, and are negatively correlated with the editing time from the appearance of the data segments to the current time.

[0038] As an implementation manner of the present invention, the calculation method of the editing parameter is: in, Indicates Editing parameters of a data block; Indicates The number of data segments in a data block; Indicates In the data block The amount of data in each data segment; Indicates In the data block The time from the appearance of a data segment to the current editing time.

[0039] It should be noted that the editing parameter reflects the frequency of data updates in the data block and the impact on the encryption performance overhead when the key length is subsequently adjusted based on the data access frequency. The larger the editing parameter, the more frequent the data block updates and the greater the impact on the encryption performance overhead.

[0040] Step S202: clustering the data segments based on the editing moments corresponding to the different data segments, and analyzing the distribution of the different data segments in the clustering results.

[0041] It should be noted that, since the update of data or information usually depends on the corresponding event background, events occurring within a certain period of time will have multiple impacts. Therefore, the closer the editing time of different data segments in the archival data is, the higher the possibility that the event information contained in the data segments is temporally related. In other words, when updating the archival data, related data are usually edited at the same time or multiple times within a short period of time. Therefore, in order to avoid shortening the key length when encrypting related data while reducing performance overhead, resulting in insufficient security, it is necessary to differentiate the key length when encrypting related data to improve the security of the archival data.

[0042] Firstly, according to the differences between the editing times of data segments, all data segments in the archive data are clustered using the DBSCAN clustering algorithm to obtain several clusters, which are recorded as editing clusters.

[0043] Then, according to the distribution of data segments in the edited cluster, the differentiation coefficient of each data segment is obtained.

[0044] As an implementation of the present invention, a specific method for calculating the differentiation coefficient of any data segment is: in, represents the differentiation coefficient of the data segment; Indicates the number of data segments in the edit cluster to which the data segment belongs; represents the standard deviation of the editing time of all data segments in the editing cluster described by the data segment; represents the average number of data segments in all edit clusters; represents the average standard deviation of the corresponding editing moments of the data segments in all editing clusters; represents the absolute value function; represents the linear normalization function.

[0045] It should be noted that the differentiation coefficient of the data segment reflects the relative distribution level of the editing moments of all data segments in the editing cluster where the data segment is located relative to the editing moments of data segments in all editing clusters. The greater the distribution difference of the editing moment of the data segment in the editing cluster where the corresponding data segment is located compared with the editing moments of all other data segments, the larger the differentiation coefficient is, and the higher the discrete degree of the key length of all data segments in the editing cluster to which the corresponding data segment in the editing cluster belongs, that is, the higher the degree of differentiation of the key length should be.

[0046] So far, the differentiation coefficient of each data segment in the archive data is obtained through the above method.

[0047] Step S003: Based on the data block to which the arbitrary data segment belongs and the number of data segments in the editing cluster, and in combination with the editing parameters and the differentiation coefficient, the key length of the arbitrary data segment is evaluated to obtain the actual key length of the arbitrary data segment.

[0048] It should be noted that when each data segment is subsequently encrypted, the larger the editing parameter of the data block where the data segment is located, the greater the possibility that an editing moment will appear in the data segment. In order to improve performance, the key length of the data segment needs to be reduced. However, in order to avoid malicious editing (such as data tampering incidents), the difference between the key lengths of related data segments needs to be increased to increase the difficulty of cracking related data segments at the same time, thereby improving the security protection of archival data.

[0049] Specifically, first, the editing coefficient of the data segment is obtained through the number of data blocks to which any data segment belongs and the data segments in the editing cluster, and the editing parameters of the data blocks to which each data segment belongs and the differentiation coefficient of each data segment are adjusted respectively to obtain the key length parameter of each data segment.

[0050] As an implementation manner of the present invention, a specific method for calculating the key length parameter of the data segment is: in, Indicates The key length parameter of each data segment; Indicates The editing parameters of the data block to which each data segment belongs; Indicated in The number of data segments in the data block to which the data segment belongs; Indicates The differentiation coefficient of each data segment; Indicated in Among all the data segments of the data block to which the data segment belongs, The number of data segments that belong to the same editing cluster; represents the linear normalization function.

[0051] It should be noted that the key length parameter reflects the degree to which the key length of the data segment increases in the subsequent encryption process of the data segment. The larger the key length parameter, the greater the degree to which the key length of the data segment increases. For the Among all the data segments of the data block to which the data segment belongs, The number of data segments that belong to the same edit cluster is in The proportion of the number of data segments in the data block to which the data segment belongs represents the influence weight of the editing parameters and the differentiation coefficient on the key length. Among all the data segments of the data block to which the data segment belongs, The more data segments that belong to the same editing cluster, the more related data segments there are in the data block to which the data segment belongs, and the longer the key length of the corresponding data segment should be. In addition, combined with the differences between the editing parameters of different data blocks, the key lengths of different data segments can be further differentiated, thereby improving the encryption effect of different data segments in the archive data.

[0052] Then, a mapping function is constructed using the key length parameter to map the key length parameter to the actual encryption key length, thereby obtaining the actual key length of each data segment.

[0053] It should be noted that since the AES algorithm usually supports three different key lengths: 128 bits, 192 bits and 256 bits, it performs repeated transformations for different numbers of rounds according to the key length during the encryption process. The longer the key length, the higher the encryption strength of the data, but the more computing resources are required for the encryption process. Therefore, the embodiments of the present invention take into account the frequent encryption, decryption and editing of archival data in the daily maintenance of electronic archival information, so that effective processing should be performed in the key length setting of the AES algorithm to better balance the encryption strength and computing resources when encrypting electronic archival information.

[0054] The mapping function is: in, For the The actual key length of each data segment; is the mapping parameter; is the minimum key length of the AES algorithm; The maximum key length of the AES algorithm; Indicates The key length parameter of each data segment; The function corresponding to the mapping parameter when obtaining the minimum value in the brackets; represents the minimum function; represents the absolute value function.

[0055] In addition, by presetting the key length 0 Perform AES encryption on data outside the data segment in the archive data.

[0056] It should be noted that, since the other data in the archive data except the data segment is data that has not changed after multiple editing times, this part of the data usually becomes fixed information in the personal archive. Therefore, when the data corresponding to the fixed information is stored for a long time, in order to avoid data security risks, directly encrypting with the longest AES key length can effectively ensure that the data security requirements are met, and the fixed data does not need to be frequently encrypted and decrypted, so the encryption efficiency of the archive data will not be affected by the key length. Therefore, the key length is preset in the embodiment of the present invention. 0 is 256.

[0057] At this point, the actual key length of each data segment in the archive data is obtained through the above method.

[0058] Step S004: Perform AES encryption on the archive data using the actual key length corresponding to each data segment in the archive data and store it.

[0059] Specifically, as an implementation mode of the present invention, a specific method for encrypting and storing archive data using an AES encryption algorithm with adaptive key length includes: Select the encryption library and use the AES module in the pycryptodome library to ensure that it supports the adaptive ciphertext length feature.

[0060] Key generation: Generate keys using a secure random number generator and manage and store them appropriately (for example, in a secure vault).

[0061] Encryption processing: Apply the adjusted AES encryption algorithm to each data segment and combine it with an appropriate padding mode (such as PKCS7) to ensure that the output ciphertext meets the encryption standard.

[0062] Generate and store ciphertext: Merge the generated ciphertexts to generate the final ciphertext data. At the same time, ensure that the corresponding metadata (such as key version, random IV, etc.) is saved for subsequent decryption.

[0063] Ciphertext storage: The final ciphertext and its metadata are securely stored in the selected storage medium (such as database, cloud storage, etc.) while ensuring storage security.

[0064] Through the above steps, the encrypted storage of personal file data in the electronic file information is completed.

[0065] The present invention also discloses a security protection system for electronic archive information, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the security protection method for electronic archive information are implemented.

[0066] Furthermore, in an optional embodiment, the memory may include a read-only memory and a random access memory, and provide instructions and data to the processor. The memory may also include a non-volatile random access memory.

[0067] The present invention also discloses a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, it is used to implement the steps of the electronic archive information security protection method.

[0068] Furthermore, the embodiments of the present invention implement all or part of the processes in the above-mentioned embodiments and methods, and can also be completed by instructing related hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and when the computer program is executed by a processor, the steps of each of the above-mentioned method embodiments can be implemented. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include: any entity or device capable of carrying computer program code, recording medium, USB flash drive, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electric carrier signal, telecommunication signal and software distribution medium, etc.

[0069] The embodiments of the present invention can effectively perform local analysis on the editing history of archival data by recording the editing information of archival data to track the process of data changes, ensuring that only high-risk parts adopt stronger encryption strategies, thereby optimizing the overall encryption efficiency and avoiding unnecessary over-encryption. At the same time, by performing differentiated encryption processing on each data segment, potential security risks are reduced, and targeted security protection is performed according to the sensitivity, editing frequency and historical changes of archival data during storage and daily maintenance, thereby improving the flexibility and security of data encryption in electronic archival information management.

[0070] In the description of this specification, the description with reference to the terms "one embodiment", "example", "specific example", etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner.

[0071] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for protecting electronic archive information, characterized in that: The method comprises the following steps: Obtaining the archive data to be encrypted and performing data cleaning, wherein the archive data includes the identity information, educational background information, and work background information of the personnel; Record the editing information of each edit of the archive data during storage and divide the archive data to obtain a number of data blocks, each of which contains a number of data segments. Analyze the editing situation of each data block in the archive data to obtain the editing parameters of the data block. Analyze the distribution differences in the number and editing time of the editing clusters to which different data segments belong relative to the data segments in all editing clusters using the editing clusters obtained after clustering the data segments, and obtain the differentiation coefficient of the data segments. Based on the data block to which the arbitrary data segment belongs and the number of data segments in the edit cluster, and in combination with the edit parameter and the differentiation coefficient, the key length of the arbitrary data segment is evaluated to obtain an actual key length of the arbitrary data segment; The archive data is encrypted and stored using AES using the actual key length corresponding to each data segment in the archive data.

2. A method for protecting electronic archive information according to claim 1, characterized in that: The method of recording the editing information of each editing of the archive data during storage and dividing the archive data to obtain a plurality of data blocks and each data block contains a plurality of data segments includes: The identity information, educational background information, and work background information in the archival data are respectively used as corresponding data blocks; Each edit of the archive data in history is regarded as an edit moment, and several data that change at each edit moment are obtained and recorded as target data, so that the target data with continuous positions in the archive data constitute a data segment, and the data that has not changed and has continuous positions constitute the initial data segment.

3. A method for protecting the security of electronic archive information according to claim 2, characterized in that: The specific method of analyzing the editing status of each data block in the archive data and obtaining the editing parameters of the data block includes: The editing parameters of each data block are calculated based on the number of data segments in each data block in the current archive data, the amount of data corresponding to each data segment, and the editing time from the appearance of each data segment to the current time. The number of data segments in the data block and the amount of data corresponding to the data segments are both positively correlated with the editing parameters, and are negatively correlated with the editing time from the appearance of the data segments to the current time.

4. A method for protecting the security of electronic archive information according to claim 2, characterized in that: The specific method for obtaining the editing cluster is: According to the differences between the editing times of data segments, all data segments in the archive data are clustered using the DBSCAN clustering algorithm to obtain several clusters, which are recorded as editing clusters.

5. The method for protecting the security of electronic archive information according to claim 2, characterized in that: The specific calculation method of the differentiation coefficient of the data segment is: The specific calculation method of the differentiation coefficient of any data segment is: in, represents the differentiation coefficient of the data segment; Indicates the number of data segments in the edit cluster to which the data segment belongs; represents the standard deviation of the editing time of all data segments in the editing cluster described by the data segment; represents the average number of data segments in all edit clusters; represents the average standard deviation of the corresponding editing moments of the data segments in all editing clusters; represents the absolute value function; represents the linear normalization function.

6. The method for protecting the security of electronic archive information according to claim 1, characterized in that: The method of evaluating the key length of the arbitrary data segment based on the data block to which the arbitrary data segment belongs and the number of data segments in the edit cluster and combining the edit parameter and the differentiation coefficient to obtain the actual key length of the arbitrary data segment includes the following specific methods: Obtaining the edit amount coefficient of the data segment through the data block to which any data segment belongs and the number of data segments in the edit cluster, and adjusting the edit parameters of the data block to which each data segment belongs and the differentiation coefficient of each data segment respectively, to obtain the key length parameter of each data segment; A mapping function is constructed using the key length parameter to map the key length parameter to the actual encryption key length to obtain the actual key length of each data segment.

7. A method for protecting the security of electronic archive information according to claim 6, characterized in that: The specific calculation method of the key length parameter of the data segment is: in, Indicates The key length parameter of each data segment; Indicates The editing parameters of the data block to which the data segment belongs; Indicated in The number of data segments in the data block to which the data segment belongs; Indicates The differentiation coefficient of each data segment; Indicated in Among all the data segments of the data block to which the data segment belongs, The number of data segments that belong to the same editing cluster; represents the linear normalization function.

8. A method for protecting the security of electronic archive information according to claim 6, characterized in that: The specific calculation method of the actual key length of the data segment is: in, For the The actual key length of each data segment; is the mapping parameter; is the minimum key length of the AES algorithm; The maximum key length of the AES algorithm; Indicates The key length parameter of each data segment; The function corresponding to the mapping parameter when obtaining the minimum value in the brackets; represents the minimum function; represents the absolute value function.

9. A security protection system for electronic archive information, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the method for protecting the security of electronic archive information as described in any one of claims 1 to 8 are implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, it is used to implement the steps of a method for protecting the security of electronic archive information as described in any one of claims 1 to 8.

Images